Dynamic Information Management and Exchange for Command and Control Applications: A Framework in Support of Emergency Management for Specified and Unspecified Emergencies.

摘要

In traditional information systems, information sharing is usually regulated by a proper set of pre-defined access control policies that state who can access which data portion and under which mode. This model does not fit the emergency management scenario, where usually there is the need to access resources with greater flexibility than during the normal system operations. In order to achieve this goal, when an emergency happens, it is necessary to bypass the regular access control policies and grant users access to resources not normally authorized, in order to handle the emergency. However, such downgrading of the information security classification should be temporary and controlled, that is, regulated by proper emergency policies. In this report we describe a proposed access control framework in support of emergency management.